dln
fvrorfdq
hyava
Behavioral task
behavioral1
Sample
e0342cd3f7e3c1025f9554223b7ff6d4_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e0342cd3f7e3c1025f9554223b7ff6d4_JaffaCakes118
Size
644KB
MD5
e0342cd3f7e3c1025f9554223b7ff6d4
SHA1
5a5506a263e9d3c5bec046ea1ae12c7009cb45d1
SHA256
99005e60547e1ddeeaaecaf2ddaa358a91d9a3e13a1a762b6666dfe1a4791e00
SHA512
2ccd3f1902ba10e47c97b9d4cdd6a3d0a3d518f733535f80ab8b7532020b1c8384dc5978a1be3a5376907d15a99c1f3105beaecfc8c6b11565ee79b7bb637000
SSDEEP
12288:DGgHi2y7ZStKlx/T9vDNXOwl3bgZutpoS:qgHi2wj/phewlLVt
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e0342cd3f7e3c1025f9554223b7ff6d4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
dln
fvrorfdq
hyava
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE